diff options
| author | Linus Nordberg <linus@nordberg.se> | 2015-02-20 12:20:09 +0100 |
|---|---|---|
| committer | Linus Nordberg <linus@nordberg.se> | 2015-02-20 12:20:09 +0100 |
| commit | 4d2993890fed46c5611735e84d4f737e8c342718 (patch) | |
| tree | 6da78e0a5362b8b7e6b0e6331f58e9b45c44dfbf /test/testdata/known_roots/US.DigiCert SHA2 High Assurance Server CA.pem | |
| parent | 7cbbfa7c7e0fba134838c5c9c58d2d3174232882 (diff) | |
Stop validating that cert.issuer matches issuer.subject.
Even canoncalized versions of this data mismatch in otherwise proper
chains. Since we're not here to validate chains for any other reasons
than attribution and spam control, let's stop validate
cert.issuer==candidate.subject. We still verify the cryptographic
chain with signatures of tbsCertificates of course.
Resolves CATLFISH-19.
Diffstat (limited to 'test/testdata/known_roots/US.DigiCert SHA2 High Assurance Server CA.pem')
0 files changed, 0 insertions, 0 deletions